The digital extortion group ShinyHunters went public Tuesday with the brazen claim that it hacked into a Federal Bureau of Investigation data center and stole sensitive information belonging to a huge number of current and former FBI employees.
The bureau’s official response has been understated.
“The FBI is aware of claims regarding unauthorized activity affecting FBIjobs.gov and is currently investigating,” the agency said in a statement.
The FBI’s jobs portal was taken offline Tuesday and remained unavailable as of Wednesday morning.
According to ShinyHunters, the stolen information includes agent names, home addresses, Social Security numbers, work assignments and, in some cases, the names of family members.
ShinyHunters, a criminal hacking and extortion group, took responsibility for the alleged breach and claimed it obtained information on nearly all FBI agents, along with people who have applied for jobs with the bureau. In total, the group claims to have stolen more than 2 terabytes of data.
In a statement posted to its dark web site, ShinyHunters said it targeted the FBI in response to an FBI announcement issued in May 2026 that detailed the group’s methods and advised victims not to pay extortion demands or ransoms following an attack.
“Threat actors often use their real or exaggerated claims of access to sensitive or personal information to prompt payment from victims,” the FBI said in its public service announcement. “Victims may receive an extortion email signed ShinyHunters.”
To support its claims, ShinyHunters released a screenshot showing what appeared to be a vandalized FBI jobs website, along with what it described as a small sample of the stolen data.
News organizations have partially verified some of the information by comparing names, addresses and Social Security numbers with credit bureau information and data preserved from previous breaches.
In research conducted by Reuters, at least nine cases appeared to match legitimate records. However, Reuters was unable to establish where the information originated or determine whether it had actually been stolen from an FBI database, as ShinyHunters claims.
ShinyHunters is one of the more notorious and attention-seeking cybercrime groups operating on the dark web.
The group has claimed responsibility for numerous high-profile hacking campaigns, including attacks involving millions of records connected to Rockstar Games, the developer behind Grand Theft Auto, as well as Canvas, an educational platform used by schools and universities across the United States.
Earlier this month, artificial intelligence company Anthropic said it detected hackers linked to ShinyHunters attempting to misuse its AI tools.
ShinyHunters has also openly discussed attempts to infiltrate networks belonging to Microsoft, Pluto TV, AT&T, Ticketmaster and numerous Ivy League universities.
The group claims the alleged FBI breach was not primarily motivated by money. Instead, ShinyHunters is demanding that the FBI remove a report that it says contains false allegations about the group.
ShinyHunters has not publicly said what it intends to do with the allegedly stolen information if the FBI refuses to comply with that demand.
The incident would represent the second known breach involving an FBI system this year.
Earlier in 2026, unidentified hackers reportedly compromised one of the agency’s systems used to manage real-time wiretaps and foreign intelligence surveillance warrants. Such a breach could potentially expose information identifying targets of federal surveillance.
Separately, FBI Director Kash Patel had his personal email account hacked and leaked by an Iran-backed hacking group, reportedly in retaliation for U.S. military strikes against Iran.
The FBI continues to investigate the claims surrounding the latest incident and has not confirmed the scope or authenticity of the data ShinyHunters says it obtained.
Be the first to comment